Returning To Normal Operation - Cisco CSS11501S-C-K9 Configuration Manual

Chapter 6 FIPS Operation
Table 6-2 FIPS Mode Command Changes (continued)
Mode Command
Backend Server secpolicy
Configuration
Mode
Reverse-Proxy secpolicy
Server
Configuration
Mode
Security Policy crypto
Configuration
Mode
Server secpolicy
Configuration
Mode

Returning to Normal Operation

78-13124-06
Follow these steps to return the Secure Content Accelerator to normal operation.
1. Connect to the device using a serial management session and enter Privileged
Mode.
[FIPS] SCA> enable
[FIPS] SCA#
Disable FIPS operation.
2.
[FIPS] SCA# no fips enable
3. Press y when prompted to reboot the Secure Content Accelerator. After the
device reboots, you are prompted for the access-level password. When the
password is accepted, the "[FIPS]" portion of the prompt is removed,
reflecting normal operation of the Secure Content Accelerator.
Cisco 11000 Series Secure Content Accelerator Configuration Guide
Notes
You can assign any security policy(ies); however, if
non-FIPS-compliant security policies are assigned, the
backend server is marked as "FIPS suspended" upon
exiting Backend Server Configuration mode.
You can assign any security policy(ies); however, if
non-FIPS-compliant security policies are assigned, the
reverse-proxy server is marked as "FIPS suspended"
upon exiting Reverse-Proxy Server Configuration
mode.
You can create only security policies containing
FIPS-approved algorithms: DES-CBC-SHA,
EXP1024-DES-CBC-SHA, and/or DES-CBC3-SHA.
You can assign any security policy(ies); however, if
non-FIPS-compliant security policies are assigned, the
server is marked as "FIPS suspended" upon exiting
Server Configuration mode.
Returning to Normal Operation
6-9